GDPR

Privacy policy

Pursuant to Regulation (EU) 2016/679 (GDPR) and the French Data Protection Act.

1. Data controller

The controller of personal data collected on virtu-space.com is:
VirtuSpace
8 rue Pablo Picasso, 31130 Quint-Fonsegrives, France
Email: coorpvs@gmail.com

2. Data collected

We only collect data necessary for the purposes described below. No hidden collection is performed.

2.1 Contact form

  • First and last name
  • Email address
  • Phone number (optional)
  • Subject and message

2.2 Quote form

  • Contact details (first name, last name, email, phone, company)
  • Requested service type (Matterport, drone, content)
  • Property information (type, address, city, postcode, surface)
  • Desired timeline and free-form message

2.3 Technical data

  • IP address (stored for 12 months for security reasons)
  • Browser type and operating system (user-agent)
  • Pages visited and date/time of connection

2.4 Supplier data (accounting back-office)

For our internal management accounting, we retain supplier details (company name, business registration number where applicable, IBAN, address) and the related supporting documents (supplier invoices, expense receipts, scanned PDF or image attachments).

  • Legal basis: legal obligation (Article L123-22 of the French Commercial Code, Article L102 B of the French Tax Procedures Book)
  • Purpose: maintaining internal bookkeeping, supporting documents in case of tax audit
  • Retention: 10 years from the end of the financial year to which the document relates
  • Recipients: VirtuSpace SAS President, certified chartered accountant, tax authorities in case of audit

2.5 Prospect data (B2B commercial prospecting)

As part of our commercial activity, we collect publicly available professional data on decision-makers of companies likely to be interested in our services (hospitality, wellness, events, commercial real estate, culture): first name, last name, job title, professional email, company name and sector. This data is sourced from B2B tools (Apollo.io, LinkedIn, professional databases, public directories).

  • Legal basis: legitimate interest (Article 6.1.f of the GDPR), the prospecting being directly related to the recipient's professional activity
  • Purpose: commercial prospecting by email in accordance with the French CNIL guidelines on B2B prospecting
  • Retention: 3 years from last contact, or until an opposition request (unsubscribe)
  • Recipients: VirtuSpace SAS, our sourcing tool (Apollo.io) and our email delivery tool (Instantly)

You may object to this processing at any time via the unsubscribe link included in each prospecting email, or by contacting us at coorpvs@gmail.com.

3. Processing purposes

  • Respond to your requests for contact or quote (legal basis: pre-contractual measures)
  • Manage the business relationship with our clients (legal basis: contract performance)
  • Ensure site security and prevent abuse (legal basis: legitimate interest)
  • Meet our legal obligations (accounting, invoicing)
  • Conduct B2B commercial prospecting targeting professional decision-makers (legal basis: legitimate interest, see section 2.5)

Data collected via the site is never used for commercial prospecting without your explicit consent. A separate B2B commercial prospecting activity, based on legitimate interest, may be conducted from publicly available professional data (see section 2.5).

4. Data recipients

Your data is intended exclusively for VirtuSpace. It may be shared with our technical subcontractors only to the extent necessary for their services, and under confidentiality agreements:

  • Hostinger International Ltd. (Cyprus) — web and database hosting
  • Email service — sending transactional emails (Hostinger SMTP)
  • Apollo.io (Apollo, United States) — sourcing of publicly available professional data (B2B prospecting only, see section 2.5)
  • Instantly (Instantly.ai, United States) — sending B2B commercial prospecting campaigns
  • Cloudflare — anti-spam protection on public forms (Turnstile)

No data is sold, rented or transferred to third parties for commercial purposes.

5. Retention period

  • Unresolved contact requests: 3 years from last contact
  • Non-converted quote requests: 3 years from last contact
  • Client data (active business relationship): throughout the relationship + 10 years (accounting obligations)
  • Supplier data and accounting supporting documents: 10 years from the end of the financial year (Article L123-22 of the French Commercial Code)
  • Technical logs (IP, user-agent): 12 months maximum

6. Your rights

Under the GDPR, you have the following rights:

  • Right of access: confirm processing and obtain a copy of your data
  • Right to rectification: correct inaccurate or incomplete data
  • Right to erasure ("right to be forgotten"): request deletion of your data
  • Right to restriction of processing
  • Right to portability: receive your data in a structured format
  • Right to object to processing
  • Right to withdraw consent at any time
  • Right to lodge a complaint with the CNIL (www.cnil.fr)

To exercise your rights, contact us at coorpvs@gmail.com attaching an ID document. We commit to respond within 30 days.

7. Data security

VirtuSpace implements appropriate technical and organisational measures to protect your data: HTTPS encryption, prepared SQL queries, CSRF protection, rate limiting, hashed passwords, restricted access to data.

8. Transfers outside the EU

Personal data collected via the site is hosted within the European Union by Hostinger International Ltd. (Cyprus).

Some processing activities nonetheless involve transfers to the United States, governed by standard contractual clauses (SCCs) approved by the European Commission under Article 46 of the GDPR, and by adherence to the EU-US Data Privacy Framework (DPF) where applicable:

  • Matterport Inc. (United States) — storage of 3D virtual tours
  • Apollo.io (Apollo, United States) — sourcing of publicly available professional data for B2B prospecting (see section 2.5)
  • Instantly (Instantly.ai, United States) — sending B2B prospecting campaigns (see section 2.5)
  • Cloudflare, Inc. (United States) — anti-spam protection on public forms

9. Cookies

Cookie use on the site is described in our cookie policy.

10. Changes

This policy may be updated at any time to reflect changes in our practices or legal obligations. The version in force is always the one published on this page.

Last updated: 17 April 2026